$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json) Hash identifier: c1Fn13MvpRkQwjbEZrGuYD/ojsNuf1P8Pyya/TMGzkQ= Subject key identifier: 39:42:E8:EC:8B:BE:6F:7D:34:F0:2F:92:93:D8:20:81:6D:83:88:06 Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1F0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft Manifest number: 1EE7 Signing time: Mon 28 Apr 2025 16:09:00 +0000 Manifest this update: Mon 28 Apr 2025 16:09:00 +0000 Manifest next update: Mon 05 May 2025 16:09:00 +0000 Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: JP7xQZpBkXwj2h1lJkwUKYhm3ofCjMGhE7+mZy+m1Xc=) 2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=) 3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7948 (0x1f0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: Apr 28 16:09:00 2025 GMT Not After : May 5 16:09:00 2025 GMT Subject: CN=680fa81c-4af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:46:e4:41:20:ab:80:d1:31:d8:22:57:4d: 8b:db:aa:3b:7e:01:ef:ed:e3:c8:9a:af:5a:e4:b4: 36:ba:d4:bb:6a:12:46:ce:f0:ca:37:8a:0c:d7:a5: 9d:c7:44:0b:84:0c:b5:21:86:15:53:c3:6d:06:74: 7e:28:bf:10:7e:2b:31:e8:22:dd:75:fa:d0:f4:41: 84:94:e0:90:4b:80:a2:39:f1:cb:b8:b6:aa:58:8e: b5:7c:c6:bb:7e:61:7f:ea:95:39:cd:19:38:6e:9f: c9:42:ee:e1:59:57:e1:71:3a:2a:f9:50:01:91:47: 60:66:b3:2f:a0:24:36:44:08:89:f9:ae:b2:bb:74: 1f:da:cc:ca:35:84:aa:01:97:39:91:2e:06:6f:2e: 61:e2:14:da:87:3e:ce:da:0c:4b:2f:a5:1a:b0:94: cf:4f:01:8c:f4:5d:82:11:21:d7:1c:50:bd:5f:24: cc:03:2d:f4:29:6f:6b:41:48:0e:3d:c8:e3:d3:f3: 68:d1:b8:e6:b9:0a:dd:b9:f0:d7:d0:9f:ed:2a:f0: 76:5e:ed:5f:85:a2:1e:d2:bc:8b:29:51:00:66:5e: 7f:75:ed:f3:9f:6d:72:76:ee:2e:11:ae:a4:47:0c: 5e:74:7b:9a:20:f4:b8:c1:a1:8d:06:13:7d:7e:3c: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:42:E8:EC:8B:BE:6F:7D:34:F0:2F:92:93:D8:20:81:6D:83:88:06 X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:35:10:1d:98:74:7e:34:45:e5:62:14:42:f5:7a:47:f7:dd: 52:4c:8d:e5:f1:c0:fe:e2:9f:c0:55:48:b3:73:8a:29:bb:06: 0e:d7:c4:85:29:e0:d0:d7:0f:a2:28:7f:84:64:21:ba:25:39: 93:e5:74:bb:86:86:e9:85:12:37:76:f1:5f:5c:04:f8:bc:b9: 08:b4:ff:41:90:6c:f4:d7:cf:37:91:76:2c:59:99:de:0b:00: b4:63:d2:38:e6:0a:1b:93:d1:4a:22:af:41:e7:19:96:c4:77: c4:4a:25:7b:70:52:11:52:ad:71:41:f4:8f:2e:37:c2:86:ff: 13:b4:f8:3a:3e:a5:15:28:93:ca:28:50:97:3d:7b:f2:6e:ff: 0c:a8:54:29:5e:4f:3b:3e:f4:2e:49:c6:1a:36:0f:82:d9:d3: 6e:79:37:61:28:39:84:a1:9f:91:41:0c:3d:b1:e8:fb:06:f3: 7b:08:0d:79:b8:b7:a0:30:ed:63:66:aa:d4:10:7c:1b:4d:54: c0:d9:79:a1:f7:0e:b0:da:a1:44:50:58:3e:d4:bc:e3:4b:ae: 8e:d5:3b:e1:65:5f:83:24:54:55:a8:e1:cf:4d:73:aa:a0:0f: e1:28:5b:d9:34:13:af:2f:f8:38:86:d7:67:f4:37:94:2e:bd: e5:95:25:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjUwNDI4MTYwOTAwWhcNMjUwNTA1MTYwOTAwWjAYMRYwFAYD VQQDEw02ODBmYTgxYy00YWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDpG5EEgq4DRMdgiV02L26o7fgHv7ePImq9a5LQ2utS7ahJGzvDKN4oM16Wd x0QLhAy1IYYVU8NtBnR+KL8Qfisx6CLddfrQ9EGElOCQS4CiOfHLuLaqWI61fMa7 fmF/6pU5zRk4bp/JQu7hWVfhcToq+VABkUdgZrMvoCQ2RAiJ+a6yu3Qf2szKNYSq AZc5kS4Gby5h4hTahz7O2gxLL6UasJTPTwGM9F2CESHXHFC9XyTMAy30KW9rQUgO Pcjj0/No0bjmuQrdufDX0J/tKvB2Xu1fhaIe0ryLKVEAZl5/de3zn21ydu4uEa6k RwxedHuaIPS4waGNBhN9fjwOTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlC6OyL vm99NPAvkpPYIIFtg4gGMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk QXJfQmJRdEpMYVBhcmdnUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgNRAdmHR+NEXlYhRC9XpH991STI3l8cD+4p/AVUizc4opuwYO18SF KeDQ1w+iKH+EZCG6JTmT5XS7hobphRI3dvFfXAT4vLkItP9BkGz01883kXYsWZne CwC0Y9I45gobk9FKIq9B5xmWxHfESiV7cFIRUq1xQfSPLjfChv8TtPg6PqUVKJPK KFCXPXvybv8MqFQpXk87PvQuScYaNg+C2dNueTdhKDmEoZ+RQQw9sej7BvN7CA15 uLegMO1jZqrUEHwbTVTA2Xmh9w6w2qFEUFg+1LzjS66O1TvhZV+DJFRVqOHPTXOq oA/hKFvZNBOvL/g4htdn9DeULr3llSWr -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:10 2025 by rpki-client on console.sobornost.net